Google Git
Sign in
apache/struts/HEAD
  1. 2614151 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#1818) by dependabot[bot] · 10 hours ago main
  2. d52ffed build(deps): bump github/codeql-action from 4.37.2 to 4.37.3 (#1817) by dependabot[bot] · 10 hours ago
  3. 94a8fcb WW-3784 Order annotated wildcard actions most-specific-first (#1813) by Lukasz Lenart · 10 hours ago
  4. 6f80298 WW-3871 Derive ConversionRule prefixes for @TypeConversion keys (#1812) by Lukasz Lenart · 10 hours ago
  5. d906f23 WW-3530 Fix visitor-validator cache-key collision under wildcard actions (#1811) by Lukasz Lenart · 10 hours ago
  6. 532ca7f WW-2934 Skip field validators when a field has a conversion error (opt-in) (#1810) by Lukasz Lenart · 2 days ago
  7. 0b2bc2b WW-3427 Add regression test for conversion errors on aliased properties (#1814) by Lukasz Lenart · 3 days ago
  8. 12015d0 WW-5540 Add caching to AbstractLocalizedTextProvider (#1808) by Lukasz Lenart · 3 days ago
  9. 8332203 WW-5474 Count files only for maxFiles, add maxParameterCount (#1806) by Lukasz Lenart · 4 days ago
  10. c3e9db1 WW-5413 Avoid writing small in-memory multipart uploads to disk (#1805) by Lukasz Lenart · 4 days ago
  11. 8a5323f WW-5539 Concurrency performance enhancements (#1799) by Lukasz Lenart · 4 days ago
  12. 73f17c1 build(deps-dev): bump org.webjars:jquery from 3.7.1 to 4.0.0 (#1802) by dependabot[bot] · 7 days ago
  13. eb69ad6 build(deps): bump org.webjars:bootstrap from 5.3.7 to 5.3.8 (#1803) by dependabot[bot] · 7 days ago
  14. 88d95b2 build(deps): bump org.webjars:webjars-locator-lite from 1.1.3 to 1.1.4 (#1801) by dependabot[bot] · 7 days ago
  15. ef8361c build(deps): bump github/codeql-action from 4.37.0 to 4.37.2 (#1800) by dependabot[bot] · 7 days ago
  16. a324538 build(deps): bump org.htmlunit:htmlunit from 5.2.0 to 5.3.0 (#1804) by dependabot[bot] · 7 days ago
  17. b154b7c ci(owasp): cap job timeout and disable NVD auto-update in check step (#1807) by Lukasz Lenart · 7 days ago
  18. 9f030f6 Library updates for cve's, suppression cleanup and not fail github action job SonarCloud if SONARCLOUD_TOKEN not found (summary report instead). (#1667) by William Dutton · 7 days ago
  19. f32270c WW-5580 chore(core): use Configuration.VERSION_2_3_34 for FreeMarker config (#1798) by Lukasz Lenart · 8 days ago
  20. f5880be WW-5591 chore(core): mark XWorkObjectPropertyAccessor as deprecated (#1797) by Lukasz Lenart · 8 days ago
  21. 6d27132 WW-4858 Evaluate JSON name allowlist at leaf keys only (#1784) by Lukasz Lenart · 8 days ago
  22. f2c1f50 WW-5604 Recognize CDI/Weld client proxies in SecurityMemberAccess (#1796) by Lukasz Lenart · 8 days ago
  23. 464817e WW-5653 Upgrade Bootstrap to 5.3.x in sample apps (#1793) by Lukasz Lenart · 9 days ago
  24. b254854 WW-5640 refactor(webjars): rename DefaultWebJarUrlProvider to StrutsWebJarUrlProvider (#1795) by Lukasz Lenart · 9 days ago
  25. 11c10ee WW-5620 Standardize logging on Log4j2 (#1794) by Lukasz Lenart · 9 days ago
  26. 60bc7b8 WW-5652 Add support for Java records and Optional serialization in the JSON plugin. (#1792) by Sri lakshmi kanthan P · 9 days ago
  27. 963a81f WW-5647 Use ConcurrentHashMap for XSLT template cache (#1781) by Arun · 10 days ago
  28. cc00343 WW-5650 Obtain a fresh JSON reader/writer per request in JSONInterceptor (#1782) by Lukasz Lenart · 10 days ago
  29. db64c10 build(deps-dev): bump org.webjars:jquery from 3.7.1 to 4.0.0 (#1789) by dependabot[bot] · 12 days ago
  30. 31036a8 build(deps): bump github/codeql-action from 4.36.3 to 4.37.0 (#1786) by dependabot[bot] · 12 days ago
  31. 6cb6abf build(deps): bump com.fasterxml.jackson:jackson-bom (#1787) by dependabot[bot] · 12 days ago
  32. de599c9 WW-5646 Modernize path normalization in Include component (#1780) by Arun · 12 days ago
  33. e5eb01a WW-5642 fix(rest): authorize @StrutsParameter on record/creator-bound REST body properties (#1774) by ⳕⲛτⲉⲅⲥⲉⳏτⲟⲅ 🕵🏻 · 12 days ago
  34. cf22320 docs(security): treat a fix or PR as disclosure, require private report first (#1785) by Lukasz Lenart · 2 weeks ago
  35. 40fcae3 WW-4858 test(json): cover nested-leaf accepted-name and include patterns (#1783) by Lukasz Lenart · 2 weeks ago
  36. b70ecc8 WW-5645 Canonicalise static content paths and remove redundant URL decode (#1777) by Arun · 2 weeks ago
  37. 18955b9 WW-5644 fix(json): confine StrutsJSONWriter write state to the writing thread (#1776) by ⳕⲛτⲉⲅⲥⲉⳏτⲟⲅ 🕵🏻 · 2 weeks ago
  38. 75a285a WW-5643 fix(json): confine StrutsJSONReader parse state to the parsing thread (#1775) by ⳕⲛτⲉⲅⲥⲉⳏτⲟⲅ 🕵🏻 · 2 weeks ago
  39. 8fb8bcb build(deps): bump net.sf.jasperreports:jasperreports (#1779) by dependabot[bot] · 2 weeks ago
  40. f03198c build(deps-dev): bump commons-logging:commons-logging (#1760) by dependabot[bot] · 2 weeks ago
  41. 525c7da WW-4858 Honor parameter filtering during JSON population (#1773) by Lukasz Lenart · 2 weeks ago
  42. 5c130f9 WW-5641 Restore struts.json.writer / struts.json.reader override in JSON plugin (#1766) by Lukasz Lenart · 2 weeks ago
  43. 08fba59 build(deps): bump org.apache.logging.log4j:log4j-bom (#1767) by dependabot[bot] · 3 weeks ago
  44. 30cbd1c build(deps): bump github/codeql-action/upload-sarif (#1768) by dependabot[bot] · 3 weeks ago
  45. 16aa431 build(deps): bump github/codeql-action from 4.36.2 to 4.36.3 (#1769) by dependabot[bot] · 3 weeks ago
  46. 745c08c build(deps-dev): bump byte-buddy.version from 1.18.10 to 1.18.11 (#1771) by dependabot[bot] · 3 weeks ago
  47. 789dbf3 WW-5640 Add WebJars support to Struts core (#1765) by Lukasz Lenart · 3 weeks ago
  48. a09f2a9 build(deps): bump github/codeql-action/upload-sarif (#1758) by dependabot[bot] · 4 weeks ago
  49. 29f75f2 build(deps): bump org.htmlunit:htmlunit from 5.1.0 to 5.2.0 (#1762) by dependabot[bot] · 4 weeks ago
  50. dc90e48 Add draft security threat model (THREAT_MODEL.md) + discoverability pointer (#1756) by Jarek Potiuk · 4 weeks ago
  51. 50c16e9 Release 7.2.1-RC1 (#1744) by Lukasz Lenart · 5 weeks ago
  52. 07afccb build(deps): bump actions/checkout from 6 to 7 (#1755) by dependabot[bot] · 5 weeks ago
  53. 153e42b build(deps): bump org.glassfish.jaxb:jaxb-bom from 4.0.8 to 4.0.9 (#1753) by dependabot[bot] · 5 weeks ago
  54. 46ba90f build(deps-dev): bump org.jacoco:jacoco-maven-plugin (#1751) by dependabot[bot] · 5 weeks ago
  55. 22243e7 build(deps): bump org.sitemesh:sitemesh from 3.2.2 to 3.2.3 (#1749) by dependabot[bot] · 5 weeks ago
  56. 1e3fa9a build(deps-dev): bump byte-buddy.version from 1.18.8 to 1.18.10 (#1745) by dependabot[bot] · 5 weeks ago
  57. 01a561d Add CONTRIBUTING.md for new contributors (#1757) by Lukasz Lenart · 5 weeks ago
  58. 59e3424 WW-5256 Decouple FreeMarker whitespace stripping from devMode (#1743) by Lukasz Lenart · 6 weeks ago
  59. 489445c Release 7.2.0-RC1 (#1742) by Lukasz Lenart · 6 weeks ago
  60. cc3ebc3 WW-5635 Avoid logging sensitive token values in TokenHelper (#1738) by Arun · 6 weeks ago
  61. 8f9b4b8 WW-5636 Harden redirect URL escaping in non-302 response body (#1737) by Arun · 6 weeks ago
  62. dd830dc WW-5630 test: streamline ConfigParseUtilTest and convert to JUnit 4 (#1740) by Lukasz Lenart · 6 weeks ago
  63. 289bcaa build(deps): bump org.htmlunit:htmlunit from 4.21.0 to 5.1.0 (#1733) by dependabot[bot] · 7 weeks ago
  64. b808dcb build(deps): bump com.fasterxml.jackson:jackson-bom (#1729) by dependabot[bot] · 7 weeks ago
  65. 4f3fd69 WW-5632 Harden commons-fileupload2 dependency against milestone binary-incompatibility (#1735) by Lukasz Lenart · 7 weeks ago
  66. 210dc86 WW-5630 - Performance Issue SecurityMemberAccess (#1721) by brianandle · 7 weeks ago
  67. 7c6034c build(deps-dev): bump org.apache.maven.plugins:maven-failsafe-plugin (#1732) by dependabot[bot] · 7 weeks ago
  68. 5e725a7 build(deps): bump github/codeql-action from 4.36.0 to 4.36.2 (#1734) by dependabot[bot] · 7 weeks ago
  69. 53ef1ad build(deps): bump org.apache.maven.plugins:maven-dependency-plugin (#1730) by dependabot[bot] · 7 weeks ago
  70. 0972a60 build(deps): bump maven-surefire-plugin.version from 3.5.5 to 3.5.6 (#1731) by dependabot[bot] · 7 weeks ago
  71. 9011c32 WW-5631 Add opt-in @StrutsParameter enforcement to ChainingInterceptor (#1719) by Lukasz Lenart · 7 weeks ago
  72. 69cb296 docs(skills): add triaging-security-reports skill (#1722) by Lukasz Lenart · 8 weeks ago
  73. e637bb1 build(deps): bump asm.version from 9.10 to 9.10.1 (#1713) by dependabot[bot] · 9 weeks ago
  74. 1555cab build(deps): bump org.apache.maven.plugins:maven-site-plugin (#1711) by dependabot[bot] · 9 weeks ago
  75. c7b1ca3 build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 (#1710) by dependabot[bot] · 9 weeks ago
  76. 26756ce security(versions): updates list of supported versions (#1708) by Lukasz Lenart · 10 weeks ago
  77. d628d94 build(deps): bump org.apache.logging.log4j:log4j-bom (#1685) by dependabot[bot] · 2 months ago
  78. cc6b4cf build(deps): bump asm.version from 9.9.1 to 9.10 (#1695) by dependabot[bot] · 2 months ago
  79. f26325f ci(dependabot): fix cooldown property name (#1702) by Lukasz Lenart · 2 months ago
  80. 1bd2951 build(deps-dev): bump org.apache.maven.plugins:maven-enforcer-plugin (#1698) by dependabot[bot] · 2 months ago
  81. 16618e0 build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 (#1694) by dependabot[bot] · 2 months ago
  82. 419fb1f WW-5535 test(core): cover wildcard-resolved unannotated methods via real proxy (#1692) by Lukasz Lenart · 2 months ago
  83. 213b83f fix(core): enforce class-level HTTP method annotations for wildcard-resolved unannotated methods (#1690) by ⳕⲛτⲉⲅⲥⲉⳏτⲟⲅ 🕵🏻 · 2 months ago
  84. 7ea7911 chore(rat): excludes Markdown files in docs/ folder (#1691) by Lukasz Lenart · 2 months ago
  85. e83487f WW-5627 Gate CookieInterceptor through ParameterAuthorizer (#1681) by Lukasz Lenart · 2 months ago
  86. 3432433 chore(agents): defines a new AGENTS.md focused on reporting vulnerabilities (#1680) by Lukasz Lenart · 3 months ago
  87. 09d0328 WW-5626 per-property authorization for Jackson REST handlers (#1674) by Lukasz Lenart · 3 months ago
  88. a48f57d build(deps): bump slf4j.version from 2.0.17 to 2.0.18 (#1683) by dependabot[bot] · 3 months ago
  89. 9c8d3de build(deps): bump github/codeql-action from 4.35.3 to 4.35.4 (#1682) by dependabot[bot] · 3 months ago
  90. e5aa3e9 build(deps): bump com.github.ben-manes.caffeine:caffeine (#1679) by dependabot[bot] · 3 months ago
  91. 56b9b68 build(deps): bump org.owasp:dependency-check-maven from 12.2.1 to 12.2.2 (#1677) by dependabot[bot] · 3 months ago
  92. fd05da7 build(deps): bump org.glassfish.jaxb:jaxb-bom from 4.0.7 to 4.0.8 (#1676) by dependabot[bot] · 3 months ago
  93. c9cfa36 build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 (#1675) by dependabot[bot] · 3 months ago
  94. 690c4c2 WW-5626 cleanup follow-ups for @StrutsParameter JSON/REST enforcement (#1673) by Lukasz Lenart · 3 months ago
  95. 7799c0f build(deps): bump commons-io:commons-io from 2.21.0 to 2.22.0 (#1672) by dependabot[bot] · 3 months ago
  96. 11e815f build(deps): bump com.fasterxml.jackson:jackson-bom (#1669) by dependabot[bot] · 3 months ago
  97. 664540c build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#1668) by dependabot[bot] · 3 months ago
  98. c3a8870 WW-5624: Enforce @StrutsParameter on JSON/REST body deserialization (#1657) by quactv · 3 months ago
  99. 8d6f139 fix(core): WW-5623 HTML-encode form action in PostbackResult to prevent XSS (#1653) by quactv · 3 months ago
  100. f4c6349 introduce private method to remove clones (#1666) by aaaZayne · 3 months ago